`$app_edit_base_uri` should be escaped with `esc_url()`